CVE-2018-5734

While handling a particular type of malformed packet BIND erroneously selects a SERVFAIL rcode instead of a FORMERR rcode. If the receiving view has the SERVFAIL cache feature enabled, this can trigger an assertion failure in badcache.c when the request doesn't contain all of the expected information. Affects BIND 9.10.5-S1 to 9.10.5-S4, 9.10.6-S1, 9.10.6-S2.

• CWE-617

• http://www.securityfocus.com/bid/103189Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040438Third Party Advisory, VDB Entry
• https://kb.isc.org/docs/aa-01562Vendor Advisory
• https://security.netapp.com/advisory/ntap-20180926-0005/Third Party Advisory
• http://www.securityfocus.com/bid/103189Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040438Third Party Advisory, VDB Entry
• https://kb.isc.org/docs/aa-01562Vendor Advisory
• https://security.netapp.com/advisory/ntap-20180926-0005/Third Party Advisory

Published

Jan 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5728Cobham Sea Tel 121 build 222701 devices allow remote attacke…
• CVE-2018-5729MIT krb5 1.6 or later allows an authenticated kadmin with pe…4.7
• CVE-2018-5730MIT krb5 1.6 or later allows an authenticated kadmin with pe…3.8
• CVE-2018-5731An issue was discovered in Heimdal PRO 2.2.190. As part of t…
• CVE-2018-5732Failure to properly bounds-check a buffer used for processin…7.5
• CVE-2018-5733A malicious client which is allowed to send very large amoun…7.5
• CVE-2018-5735The Debian backport of the fix for CVE-2017-3137 leads to as…7.5
• CVE-2018-5736An error in zone database reference counting can lead to an …
• CVE-2018-5737A problem with the implementation of the new serve-stale fea…5.9
• CVE-2018-5738Change #4777 (introduced in October 2017) introduced an unfo…5.3
• CVE-2018-5739An extension to hooks capabilities which debuted in Kea 1.4.…6.5
• CVE-2018-5740"deny-answer-aliases" is a little-used feature intended to h…7.5